Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: BLqR78r4+ujaokDI6byWpDjhypOl7+BzR7cQn81Afg4=
Subject key identifier: 72:5C:CD:5F:14:E1:AA:88:54:C9:1E:14:95:E9:32:BC:DA:AF:A9:C5
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 0199228D1AF0F4ED934717E22A558D77AD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:01:36 +0000
Manifest this update: Sun 07 Sep 2025 05:01:36 +0000
Manifest next update: Mon 08 Sep 2025 05:01:36 +0000
Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=)
2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: rBSd97bFduKHKTD4wm8pKiheniSsOfr8Ad4XJUbFGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:1a:f0:f4:ed:93:47:17:e2:2a:55:8d:77:ad:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Sep 7 05:01:36 2025 GMT
Not After : Sep 8 05:01:36 2025 GMT
Subject: CN=725ccd5f14e1aa8854c91e1495e932bcdaafa9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:8d:26:f3:7b:01:4c:be:db:b0:12:41:5e:
5c:8a:64:f5:50:c0:8d:9f:44:d4:fb:eb:9f:4f:52:
69:30:11:e5:0e:73:8e:5f:69:66:b9:9f:fe:b0:b9:
ea:8a:f2:39:ea:2c:bf:b0:30:36:21:93:4f:d6:3e:
c2:49:81:4f:29:3b:da:91:3b:ca:0b:e7:14:38:9b:
be:74:07:15:c5:b7:56:30:28:9e:9e:96:9a:fa:3b:
e0:9f:15:2d:08:3a:67:b0:cc:93:34:c4:77:95:80:
36:93:43:26:27:73:66:fe:11:77:ba:e3:a0:e9:05:
46:f3:b4:9c:ad:79:77:ef:ec:ab:37:3b:27:1b:72:
68:2d:57:41:76:c0:ae:9f:a6:6d:e6:bc:9e:61:09:
b3:9c:ec:65:69:4a:4e:d0:89:12:c2:26:31:12:64:
39:20:99:94:c5:94:05:0b:51:46:21:07:a3:b2:fa:
ea:5b:1f:5c:c1:23:10:56:81:df:ea:4d:51:c2:04:
39:98:c2:39:e3:d8:c3:db:4a:63:d0:8d:1c:01:e4:
af:ae:5d:89:e5:21:7a:b3:f5:da:58:e9:df:9c:52:
51:b6:aa:55:e4:a7:d7:f4:ae:53:8e:c0:c2:b4:ff:
55:5a:e4:4a:f7:70:d0:fb:11:f3:fe:74:d0:59:fd:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:CD:5F:14:E1:AA:88:54:C9:1E:14:95:E9:32:BC:DA:AF:A9:C5
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:35:99:6c:71:28:d5:df:0f:f9:5f:f2:d7:50:7a:04:46:04:
0a:77:68:8f:c9:5e:2a:dd:c8:cc:1c:52:f0:51:2a:b3:24:95:
3e:ac:f9:8a:fd:c4:31:09:1b:56:c3:f6:7e:32:8c:5a:37:37:
fd:b3:35:53:8a:08:d2:58:65:70:ef:2a:ef:f8:17:15:32:ee:
90:d5:30:b8:79:2f:d6:de:2b:2b:43:9a:f5:0d:46:06:a8:35:
2b:83:67:17:15:af:c8:9b:87:71:53:d8:1f:43:5f:8e:d0:4e:
0e:7f:c9:5a:cd:85:9a:84:85:d1:fe:2d:d8:83:ff:27:1f:09:
bd:f5:7f:fb:e5:aa:d6:f8:b6:75:90:2b:74:77:9d:be:82:6f:
fb:58:a0:52:b5:93:74:c3:2a:98:19:86:de:d0:e4:ea:e3:c2:
7b:e7:d3:aa:d2:1a:f4:59:44:75:e4:4f:a9:54:5b:a8:a1:37:
8b:ee:8a:6e:14:44:53:e7:21:e4:ed:2a:eb:e8:35:40:f1:1e:
9f:12:b1:7b:85:56:e6:d5:06:72:f9:fa:5c:e4:5f:5f:0d:33:
28:30:70:37:31:48:4e:cf:89:0a:4e:cf:11:b4:1c:e6:9c:43:
10:00:bf:5a:5a:9d:91:c9:fb:90:bd:b2:e1:0b:ad:07:ec:12:
0d:de:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:50 2025 by rpki-client